Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/39d562d7-6e76-3ad1-8727-3b3f7648f2bb.roa
File:                     39d562d7-6e76-3ad1-8727-3b3f7648f2bb.roa (raw, json)
Hash identifier:          FUhdbNVm8rCSOx+NYJvUlZXkhiRYjg5Q1s7sdudywPY=
Subject key identifier:   4F:6B:07:F7:03:0D:9A:F4:72:A9:45:DC:0D:5F:8A:86:7A:D6:62:65
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F43285847537B54176CA1E7A3FAD181CC
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/39d562d7-6e76-3ad1-8727-3b3f7648f2bb.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     63018
IP address blocks:        2602:fb54:700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:54:17:6c:a1:e7:a3:fa:d1:81:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=c17916c1-8fae-484e-af04-150321aa7db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:33:b6:71:ed:eb:70:a6:d4:e2:c5:6e:fd:
                    5e:20:1c:64:94:39:67:6f:45:b9:e0:44:b5:11:87:
                    c1:5d:d8:2e:1f:ab:93:5e:ba:f2:1b:17:cf:f2:1a:
                    df:a9:52:1d:16:8c:7a:d2:e2:f8:c7:22:b2:9e:a9:
                    8d:22:f0:23:e0:f2:85:2d:d9:97:00:6a:ef:61:9f:
                    47:40:f4:c9:4f:fa:cb:fa:28:73:02:ef:fa:96:64:
                    23:db:9a:58:ed:dc:27:cd:69:8d:fa:9c:d4:fd:c2:
                    fe:18:bf:ae:5c:72:c1:e0:1c:cf:4e:fb:90:be:1a:
                    ec:82:4f:cb:de:01:cc:d4:1f:37:55:f4:a2:4c:b0:
                    07:a8:3a:3a:c9:11:51:7a:47:5e:06:a4:b6:19:47:
                    10:99:eb:d4:84:1c:0c:bf:ee:86:5e:00:02:09:9b:
                    40:03:fc:23:20:94:66:63:56:fb:fc:7c:e4:08:55:
                    2b:01:f7:ce:e1:00:25:7f:4d:0f:57:12:b0:d4:72:
                    9e:36:b7:a7:d9:c0:73:22:ce:05:ef:a3:19:92:e8:
                    95:c2:a4:06:95:91:14:bb:d2:bc:64:4d:b9:bc:bf:
                    a0:5c:64:f0:ac:c6:25:7e:88:ed:ee:10:34:2f:98:
                    5c:ae:24:45:0f:5d:3a:d7:22:7d:a9:95:1f:c3:6e:
                    e8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6B:07:F7:03:0D:9A:F4:72:A9:45:DC:0D:5F:8A:86:7A:D6:62:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/39d562d7-6e76-3ad1-8727-3b3f7648f2bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:51:88:45:69:1a:03:8b:1f:95:90:47:f9:5e:d0:20:02:56:
         33:41:2c:7a:3c:ae:7e:c9:62:cd:32:a3:59:0b:ec:d1:83:8a:
         c8:35:ef:af:47:aa:19:a1:b8:c0:d1:a2:92:97:78:7e:b2:47:
         61:c8:fa:94:9d:77:2a:77:48:3b:00:91:ca:db:5d:b9:6c:ac:
         f0:7e:47:e6:26:a2:ab:c1:7b:cb:5a:7f:c3:96:da:58:bb:50:
         ba:50:ee:8a:99:0b:81:03:86:b2:46:40:64:3e:13:55:1a:b1:
         a2:e7:0f:48:7c:3d:69:dd:57:cd:a0:22:77:65:31:bc:26:a8:
         e3:24:9b:b5:0d:7c:9b:d6:b1:a5:40:15:c0:2c:ab:82:83:9f:
         58:aa:52:e1:3d:6c:52:84:a4:46:3f:18:55:e1:6c:a1:23:16:
         6c:91:18:2a:6b:3c:b6:fd:ef:64:48:f2:d3:72:07:4a:92:aa:
         31:53:d3:e1:96:3a:0d:00:82:5a:bb:4d:87:78:fd:6e:de:5f:
         80:bf:26:ca:1e:53:06:72:c9:88:17:c5:fc:e6:0b:ab:2c:78:
         26:00:94:9a:88:94:e9:3c:8e:73:d4:a9:3d:16:ea:c5:13:ea:
         f9:70:60:de:1c:de:97:0c:55:91:67:53:07:1e:4c:dd:72:a1:
         91:4f:8e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:18 2024 by rpki-client on console-fra.rpki-client.org